From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id ACMBLBc+UmAWCAAA0tVLHw (envelope-from ) for ; Wed, 17 Mar 2021 17:36:23 +0000 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id aNjxJxc+UmDqPQAA1q6Kng (envelope-from ) for ; Wed, 17 Mar 2021 17:36:23 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 624B526C6E for ; Wed, 17 Mar 2021 18:36:23 +0100 (CET) Received: from localhost ([::1]:39806 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lMa5m-0003nd-Hp for larch@yhetil.org; Wed, 17 Mar 2021 13:36:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42828) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lMZY7-0000xP-OX for guix-devel@gnu.org; Wed, 17 Mar 2021 13:01:36 -0400 Received: from mail-wm1-x329.google.com ([2a00:1450:4864:20::329]:41639) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lMZY5-0000Ml-So for guix-devel@gnu.org; Wed, 17 Mar 2021 13:01:35 -0400 Received: by mail-wm1-x329.google.com with SMTP id t5-20020a1c77050000b029010e62cea9deso1758351wmi.0 for ; Wed, 17 Mar 2021 10:01:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=mydTm3GIkB3rJ9i2Mz+PF/XZzqmXuYETeMfm3ucgKvw=; b=FlJkS2/B0X/EA4lXJCPvmxXMq/H9gMDui2qwLOUrVkIwsRDqx8mtVxNv7H3/sa+haN 5z0DfbGN0PIcxz5tM702yPeR3hjtRxBzHnvCCfRPydjpnFkApVF2ZgCnTcOQsvGKGCTQ eOSF/13rI5r90FnD4HHY2qLo3Bocye1OHS9hlTg3Yu6P5eAid65+m+S22zFG2OLcKsjM Br45R7C6K1cLfk1kniGdwuHlUa/d9ptMZVcv1TLcWzQ7tnKpV7mVQdLtcrkvsjlUeSth wHngH0cRp6x+kK7jOYscPkkWtOkU0tvbCYT6mjy+2yatUoOfgVC52j0a1AQzQNTaJPd/ Jqxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=mydTm3GIkB3rJ9i2Mz+PF/XZzqmXuYETeMfm3ucgKvw=; b=hP4zWMdfEfe0NirCOuEv/uKy8exWkzLSXUUe1jbpffm21dB0jYCrHDNAfsv72jw3Uu EkjnAKoL72xCGUsE8AOjrWSiAAYHwqzL+K8b13bPfaaT8EXQbvtC8M1k8L+r9CB0L2Dz 7/6/zzFTMEBrnioymW+EdyBi78w00wRh/yXb4zeVmW0c86JTHW8woBJn0vuipGtsqCtS tKX1b10yP2I1mMFT6x6IYDY/j4ylPwIux7O+BmbbLQCCF0W4LXZKzZdEVT20VFBTgzok UZH7uNtEA/J+JiFNTN8jJq6L9p480RRde6/CtQrZMVJg2UHz4X15DUOb3V8ONZo+jA5j iFTQ== X-Gm-Message-State: AOAM533x7j/CS284fro2HA2t9sZimedf0Rt2+UH6HxDvzdciiOTHisWB N9156a9a8VoLs60WTVn/1+1oOL1DiMk= X-Google-Smtp-Source: ABdhPJzflMmsgat9FfMpQ/MLK4RIxp2RyhAmgDSIqaeW4sVDknTy/i+d469oMc5uwjm9B62dYRSNVg== X-Received: by 2002:a1c:650a:: with SMTP id z10mr4700262wmb.154.1616000491842; Wed, 17 Mar 2021 10:01:31 -0700 (PDT) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id a17sm3064156wmj.9.2021.03.17.10.01.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 17 Mar 2021 10:01:31 -0700 (PDT) From: zimoun To: =?utf-8?Q?L=C3=A9o?= Le Bouter Subject: Why [bug#47081] Remove mongodb? References: <20210312005632.13690-1-lle-bout@zaclys.net> Date: Wed, 17 Mar 2021 17:56:23 +0100 In-Reply-To: <20210312005632.13690-1-lle-bout@zaclys.net> (=?utf-8?Q?=22L?= =?utf-8?Q?=C3=A9o?= Le Bouter"'s message of "Fri, 12 Mar 2021 01:56:27 +0100") Message-ID: <86ft0twwg8.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2a00:1450:4864:20::329; envelope-from=zimon.toutoune@gmail.com; helo=mail-wm1-x329.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616002583; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=mydTm3GIkB3rJ9i2Mz+PF/XZzqmXuYETeMfm3ucgKvw=; b=rezKgA1D0x0Pw014Pf3q+y82skp3JIzAqJCox+80i5cm4f7uyt5LuXqnUDdhXxea/cWze4 LQB3CxamW7Xd0WWQpyARufjix9Txh/MmztCBPZlJofGNcfnecHCfk7H03dWUF74YKobGgm yTZFoJzsU2PI/w1N1cVDWcy+6VwxS5lbd8nHgpuZwUwfgKvJiADStD07ILD50NXc2q6qFl vX+K0AFuwWienGpZAZzjcgzBnxK34CkhAnRu6hJS/NB2C7EIGw4eDuDa73bD2PYXO1g/J1 RWbtPRq2dsfKHX34WHyY9s0s93kpnejmDlDXkX5AaSbn0I5HM+IGtlIBcpJlFg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616002583; a=rsa-sha256; cv=none; b=GnsLt0kp2AqyMyPOVBUy+ocAjaEy+i3s070qOI5Ba3TknN7FCse9EgsRgWnVzhFDZK32ls z8tp3sMAfb1BPY/89rbbfXqvK9F9pUu+CDzYkafMrYEHN7QY39aJcD/HdAcauzzOd9mMJ2 1gO40dc+r9DuJrehfbMVemaK0d/SMckrvo9aG+V+lnmLpwCTvp3ZBqyShSwnaJSYwZCliX 078TtrZj2d0l0EfelBQnHLF03C/lIgqtKDwvdi85WqleSarL1bof+M2nUXBdnIBQ9Ab273 0O8bC187Bv+SjuAHe9zGr5hFOR7kCzVBtLLtC/kbPw/RkenljiMn0kFqVdT5iQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b="FlJkS2/B"; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -2.10 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b="FlJkS2/B"; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 624B526C6E X-Spam-Score: -2.10 X-Migadu-Scanner: scn0.migadu.com X-TUID: c0XSNS0kY/xn Hi L=C3=A9o, On Fri, 12 Mar 2021 at 01:56, L=C3=A9o Le Bouter wrot= e: > mongodb 3.4.10 has unpatched CVEs and mongodb 3.4.24 has some files in the > release tarball under the SSPL, therefore we cannot provide mongodb while > upholding to good security standards. [...] > doc/guix.texi | 28 ----- > gnu/packages/databases.scm | 252 ------------------------------------- > gnu/services/databases.scm | 88 ------------- > gnu/tests/databases.scm | 83 ------------ > 4 files changed, 451 deletions(-) Could you wait more than 4 days between the patch submission and effectively pushing it? Well, you updated mongodb from 3.4.10 to 3.4.24 on the March 10th, submitted a patch series for the removal on the March 12th and pushed on the March 16th. In the meantime, the update has been reverted on the March 11th because of license issue, IIUC. If the removal for security reasons had been discussed on IRC, it could be nice to point the discussion here. Otherwise, open a discussion on the topic on guix-devel or bug-guix. The full removal is a radical solution (especially, it should be done with 2 commits: service+doc and then package; well another story). All the best, simon